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1. The attached memo from AFSA-OOB, dated 14 April I960, if fdrwarded 
for your comments and recommendation. 
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Deputy Director, AFSA 



BL 



To* AFSA-OOA 



From* AFSA-04 Date* 28 MAT 60 



Comment Mo. 2 
Mr. Corry/426 



1. Surveillance of communications intelligence activities has been largely 
limited in the past to occasional spot-checks because of limitations on personnel 
available for suoh tasks and because of the tremendous scope Involved In a 
thorough analysis. A rough estimate indicates that AFSA communications represent 
at least 76-80 percent of the total encrypted massage volume of the Armed Force#. 
Included among activities conducted recently along this line are* 

a. Approximately a year ago, one traffic analyst was assigned the task 
of determining types and amount of information available through external examni na- 
tion of Army Security Agenoy traff io. Coverage was limited to ASA traffio appear- 
ing on ACAH circuits which were under surveillance for ordinary seourity monitoring 
purposes. Ho formal report was rendered but evidence was sufficient to indicate 
that the following conclusions could be substantiated* 

(1) That the peculiar characteristics of intercept traffio males 
it easily identifiable and that any attempt at conceal meat 
would have to be of suoh drastic nature as to make praotioaV. >•/ 
bility questionable. 

(2) That it is probable that the extensive use of radio eammunioa- 
tions for forwarding of intercept is unjustified, and that 
proper segregation and use of courier aircraft would result 
in reducing radio traffic volume to suoh an extent that con- 
sideration feasibly might be given to application of trans- 
mission seourity measures to reduce recognicability. 

(S) That the Amy Security Agency field intercept organization 
(i.e., "Order of Battle Information") could be reconstructed 
with a minimum of effort. 

(4) That some "special" operating practices which tend to further 
segregate intercept traffio might be eliminated without im- 
peding traffio hAndli&g. 
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(5) That circuit discipline end operator efficiency, although 
approximating the overall Amy level, eould etand consider- 
able improvement* 

(6) That establishment of a procedure whereby the security monitor- 
ing activity might insure that corrective action is taken in 
eases of major transmission seourity violations, would be 
beneficial* 



(7) That, under certain circumstances, it is possible for an enemy 
to determine specific intercept targets by careful padding of 
his traffic volume and olose analysis of volume originated by 
certain intercept stations* 

(8) That, by observation of volume originating in certain areas, 
it is possible for general areas of emphasis for intercept 
purposes to be determined* 



b* Within the past year and a half, Qp-20 3JX oonduoted a survey of 
Qommunioation Supplementary Activity Traffic similar to that carried on by Army 
Seourity Agency. The conclusions were adequate} not only was "Order of Battle 
Information" obtained but the classified call signs and delivery groups in use on 
the supplementary net were recovered in full. 

e* Stations originating intercept traffic have beensubjeot to the same 
violation, compromise, and traffio volume reporting procedures as all other Armed 
Forces activities, thus providing one means of continuing surveillance* It was in 
connection with t he carrying out of this procedure that the recent decisions con- 
cerning the inadequacies of CSP 1515/SXGGUM were determined* 



d* A program to avoid association of direct connection between certain 
"oritioal area" Special Seourity Officers and Arlington Ball Station has been in 
effeot for some time* This program involves careful control of external addressing 
Of communications and, in some eases, use of disguised cryptographic system indica- 
tors , 



a* Spot-checks of message headings of decrypted tapes have been made at 
Irregular Intervals in the past for Indicator depths and for careless practices in 
Indicator selection, 

t • Ho -evaluation of orypto-seourity provided by AS AM 2-1 has been in 
process for the past several weeks* An attempt is being made to devise a one-time 
key procedure acceptable for interoept station use. 
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*• ** ** ^lie-red that a more oomplete and more thorough security analysis of 
AFSA communications is desirable, to obtain factual data to substantiate conclusions 
presented in paragraph 2a bove, and to provide a planned check on cryptographic op- 
erating practices* This will require some assistance from AFSA-02. 4 

„ recommended that the attached Disposition Form, requesting assist anc e 

xrom AF5A-02, be approved and forwarded. 
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D/F from AP3A-04 to 
AFSA-02 subj as above 



/s/ H.O. HAHSEH 
5.0. HANSKN 
Captain, U.S. Havy 
Chief, Office of Secraiity 
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